GCVE - cpe:2.3:a:thekelleys:dnsmasq:2.86:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:thekelleys:dnsmasq:2.86:*:*:*:*:*:*:*

part: a version: 2.86 update: *

Vendor	Thekelleys (`2b401865-b44d-5460-8982-05bf0b551d92`)
Product	Dnsmasq (`dd61cf97-cadb-5769-bf49-db575863c2d6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/dnsmasq`	purl2cpe	2026-06-01 10:11:34.525045
`pkg:deb/ubuntu/dnsmasq`	purl2cpe	2026-06-01 10:11:34.525047
`pkg:github/dnsfilter/dnsmasq`	purl2cpe	2026-06-01 10:11:34.525048
`pkg:github/guns/dnsmasq`	purl2cpe	2026-06-01 10:11:34.525050
`pkg:github/powerdns/dnsmasq`	purl2cpe	2026-06-01 10:11:34.525051
`pkg:gitlab/redhat/dnsmasq`	purl2cpe	2026-06-01 10:11:34.525053
`pkg:rpm/fedora/dnsmasq`	purl2cpe	2026-06-01 10:11:34.525054
`pkg:rpm/opensuse/dnsmasq`	purl2cpe	2026-06-01 10:11:34.525056
`pkg:thekelleys/dnsmasq`	purl2cpe	2026-06-01 10:11:34.525058

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-45957`	vulnerable	2026-06-08 05:36:49.604107	Details available Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge. Published: 2021-12-31T23:53:25.000Z Updated: 2024-08-04T04:54:31.142Z Open on db.gcve.eu Reference links https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2021-935.yaml https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35920 https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016162.html https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016164.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-45956`	vulnerable	2026-06-08 05:36:49.603582	Details available Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge. Published: 2021-12-31T23:53:34.000Z Updated: 2024-10-28T20:56:27.009Z Open on db.gcve.eu Reference links https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2021-933.yaml https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35887 https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016162.html https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016164.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-45955`	vulnerable	2026-06-08 05:36:49.603110	Details available Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a proper bounds check upon pseudo header re-insertion. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge." However, a contributor states that a security patch (mentioned in 016162.html) is needed Published: 2021-12-31T23:53:42.000Z Updated: 2024-08-04T04:54:31.055Z Open on db.gcve.eu Reference links https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2021-932.yaml https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35898 https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016162.html https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016164.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-45954`	vulnerable	2026-06-08 05:36:49.602655	Details available Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge. Published: 2021-12-31T23:53:51.000Z Updated: 2024-08-04T04:54:31.184Z Open on db.gcve.eu Reference links https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2021-931.yaml https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35861 https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016162.html https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016164.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-45953`	vulnerable	2026-06-08 05:36:49.602174	Details available Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge. Published: 2021-12-31T23:52:10.000Z Updated: 2024-08-04T04:54:31.143Z Open on db.gcve.eu Reference links https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2021-929.yaml https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35858 https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016162.html https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016164.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-45952`	vulnerable	2026-06-08 05:36:49.601716	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-45951`	vulnerable	2026-06-08 05:36:49.600967	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

thekelleys dnsmasq 2.86

Notes

PURL mappings

Vulnerability references

Contribute